Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JnQTN_YSzB1-LXnUMUIdlYFUa1s.roa
File:                     JnQTN_YSzB1-LXnUMUIdlYFUa1s.roa (raw, json)
Hash identifier:          QvgZWwGHDa/x7MfyTuC7vw9ELFKPyW+AESkbWwio+ms=
Subject key identifier:   26:74:13:37:F6:12:CC:1D:7E:2D:79:D4:31:42:1D:95:81:54:6B:5B
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018B18F1680A9844B965E19455188EF12659
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JnQTN_YSzB1-LXnUMUIdlYFUa1s.roa
Signing time:             Tue 10 Oct 2023 09:35:55 +0000
ROA not before:           Tue 10 Oct 2023 09:35:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.162.3.0/24 maxlen: 24
                          46.162.0.0/24 maxlen: 24
                          46.162.8.0/24 maxlen: 24
                          46.162.9.0/24 maxlen: 24
                          46.162.10.0/23 maxlen: 24
                          46.162.10.0/24 maxlen: 24
                          46.162.11.0/24 maxlen: 24
                          46.162.15.0/24 maxlen: 24
                          46.162.12.0/24 maxlen: 24
                          46.162.13.0/24 maxlen: 24
                          46.162.14.0/24 maxlen: 24
                          46.162.18.0/24 maxlen: 24
                          46.162.22.0/24 maxlen: 24
                          46.162.23.0/24 maxlen: 24
                          46.162.20.0/24 maxlen: 24
                          46.162.21.0/24 maxlen: 24
                          46.162.26.0/24 maxlen: 24
                          46.162.32.0/24 maxlen: 24
                          46.162.50.0/24 maxlen: 24
                          46.162.51.0/24 maxlen: 24
                          46.162.48.0/24 maxlen: 24
                          46.162.49.0/24 maxlen: 24
                          46.162.52.0/23 maxlen: 24
                          46.162.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Oct 2023 16:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:18:f1:68:0a:98:44:b9:65:e1:94:55:18:8e:f1:26:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Oct 10 09:35:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26741337f612cc1d7e2d79d431421d9581546b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:2b:b7:26:a5:91:26:32:65:a4:6e:bf:0d:
                    61:25:c5:18:4f:e5:e0:2e:51:3f:98:ed:7b:15:af:
                    66:0a:a0:58:9f:0c:ae:31:ed:47:80:60:cb:bb:15:
                    f7:90:95:44:ff:98:79:57:9e:d5:14:0e:30:f9:99:
                    1f:6a:19:93:9e:c8:f5:66:ed:4e:ea:a9:b4:2c:1c:
                    b3:5f:9f:e7:e7:fb:c5:03:6c:87:aa:9f:97:07:51:
                    8b:a8:a1:e5:8e:f8:25:ae:76:56:21:ba:15:8b:4f:
                    4f:cd:c4:51:10:5f:bf:bb:33:48:df:40:1c:2f:bb:
                    80:d1:07:8e:d9:dd:9f:df:c2:88:15:6d:a6:3d:aa:
                    bc:8a:cc:a7:a7:5c:c9:31:76:d7:b2:4e:fd:76:f4:
                    e6:32:cf:fd:f6:54:c4:a4:9a:4f:66:7e:9b:49:95:
                    a4:9e:32:11:9b:bc:2b:8f:1d:c9:fc:47:99:a1:83:
                    ec:da:d8:ce:cc:04:ad:df:2e:a6:0c:78:9c:ee:c0:
                    b5:36:11:e2:fa:31:46:0c:1a:b4:f7:b2:3e:a0:39:
                    d8:72:f1:a5:5b:c0:05:1a:0c:0d:4a:fe:ac:a7:db:
                    3e:2e:1a:a3:de:b1:e9:39:30:79:5d:f7:98:ca:cb:
                    75:86:a9:0b:d1:e3:70:4a:68:07:da:e2:d8:db:77:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:13:37:F6:12:CC:1D:7E:2D:79:D4:31:42:1D:95:81:54:6B:5B
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JnQTN_YSzB1-LXnUMUIdlYFUa1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.0.0/24
                  46.162.3.0/24
                  46.162.8.0/21
                  46.162.18.0/24
                  46.162.20.0/22
                  46.162.26.0/24
                  46.162.32.0/24
                  46.162.48.0-46.162.53.255
                  46.162.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:88:6c:cf:0b:e0:6f:b4:2c:8c:82:f0:b0:b3:cb:93:62:
         f1:69:14:05:71:4b:06:74:1b:b8:18:d8:b3:ea:c6:cb:5a:61:
         c2:44:3f:da:59:ca:a2:4c:c4:cb:b9:74:2f:77:14:ea:32:3c:
         9f:82:42:f0:7b:48:c7:35:8b:af:9c:be:64:a6:e8:08:3f:34:
         5c:5d:3c:3e:7e:f5:30:60:d1:21:63:b2:92:eb:81:2a:71:fa:
         72:5e:4f:9b:9a:7c:a5:d4:ea:bc:ce:78:39:86:b2:b9:c2:4a:
         38:1e:24:4e:77:57:6b:1f:08:f8:cf:ba:29:f9:37:eb:34:dd:
         16:b4:74:db:fe:28:84:c7:f1:e5:6a:7f:29:e9:9b:50:9e:47:
         f2:b7:f5:4c:6c:1c:da:ee:29:73:54:87:ce:7e:6a:cc:43:91:
         7a:f9:f2:52:e5:a4:c5:1c:86:fc:1c:7b:8c:4d:40:97:33:da:
         1c:15:61:99:90:ad:4b:e4:e7:26:15:a3:ab:28:9c:71:6c:0f:
         a3:6a:e9:3f:ea:b6:28:f0:5e:0c:a2:d2:46:86:e0:36:02:36:
         e7:34:09:68:1b:70:34:9d:83:a1:aa:12:4a:75:a9:d1:5e:53:
         6b:80:14:e9:22:7a:38:29:02:6e:00:87:fe:30:5a:29:a9:b1:
         19:04:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org